topic Re: How to reach hosts with public addresses in DMZ from outside in Network Security

How to reach hosts with public addresses in DMZ from outside

jan.frode.sjursen — Mon, 11 Mar 2019 12:58:12 GMT

We are going to replace an old Linux based firewall with a Cisco ASA 5505. On the outside interface we have a 255.255.255.252 subnet (1 available address) and we have a DMZ zone with a 255.255.255.240 subnet (with official IP addresses) Usually we translate public addresses on the outside interface to private adresses in DMZ with the static command but in this case there are no address translation from outside to the DMZ. We want to do the same thing with the new firewall. Between the outside interface and the inside interface we will be using NAT/PAT. This solution work's fine with the old firewall but how can we do the same with Cisco ASA 5505? (With static or NAT exemption or something else) The person who installed the old solution can't be found.

Re: How to reach hosts with public addresses in DMZ from outside

Jon Marshall — Thu, 12 Jun 2008 09:21:42 GMT

Easiest thing to do is just a static translation ie.

static (DMZ,outside) 195.167.10.0 195.167.10.0 netmask 255.255.255.240

Jon

Re: How to reach hosts with public addresses in DMZ from outside

jan.frode.sjursen — Sat, 14 Jun 2008 13:38:59 GMT

Thanks! We have not tested it yet but i'm pretty sure this will work.

Re: How to reach hosts with public addresses in DMZ from outside

sr2525980 — Sun, 15 Jun 2008 02:25:34 GMT

Yup Jon is rite. Just shot it 🙂

Regards

- Afan